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SECURITY HAS ALWAYS BEEN IMPORTANT TO TELSTRA 



% So important each team had their own 
- and each was working on what they 
saw as most important 

* Now: Single Operations team 

% CI SO as the accountable executive 
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SO WHAT DOES THAT LOOK LI KE? 
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PEOPLE, PROCESS AND TECHNOLOGY 



Centralised responsibility 

Revamped, restructured and 
reorganised people and processes 

Create CERT, SOC, Advisory and 
Governance teams 

Build and deliver one single set of 
standards - and a documented 
exception process 

Upgrade and distil tools and 
training - one set of tools 
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LOCAL PRESENCE, GLOBAL FOOTPRINT 



Key: A single team that sees all 
incidents across Telstra's 
networks - core and customers 

* Size - or at least scale - does matter 

% Interfaces into regional and global CERTs 
% Active player in APAC threat reporting 

\ Global relationships: 

Arbor, Cisco, Microsoft, IBM 
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DEVICE MANAGEMENT VS SECURITY MANAGEMENT 



Telstra's key learnings: 

% Clear separation - allows for focused 
Security skills and scale 

\ Difference between "blinking lights" 
and security analysis 

* Allow for single security team across 
multiple networks 

% Dedicated Network Ops teams to manage 
the blinking lights 

% Focused Security team across multiple 
network to identify security threats 
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PULLING IT TOGETHER FOR CUSTOMERS 



\ Better experience for our customers 
- customer facing network teams 
with "back- of- house" security 

* Better access to deep security expertise 

* We use ISO27001 to keep teams aligned 
to customers 

% Telstra uses an ISMS to map customer 
policy to Telstra people and process 

% Tailor ISMS to each customer's 
requirements 




TELSTRA UNRESTRICTED 



Telstra Security - Local Presence, Global Perspective 



4 



WHY TELSTRA? 

\ Pro-active and constant monitoring of the globe for existing and 
potential outbreaks 

* Strategic alliances with world-leading security vendors 

\ Telstra 24/7 monitoring by the Telstra Security Operations Centre 

% Greater ability to anticipate or identify potential threats 

% Faster response than often possible with in- house management 
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